68526 matches found
CVE-2018-20598
UCMS 1.4.7 has ?do=useraddpost CSRF...
CVE-2018-20552
Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c...
CVE-2018-5911
Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 73...
CVE-2018-21100
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...
CVE-2018-17766
Ingenico Telium 2 POS Telium2 OS allow bypass of file-reading restrictions via the NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N...
CVE-2018-21005
The bbp-move-topics plugin before 1.1.6 for WordPress has code injection...
CVE-2018-21054
An issue was discovered on Samsung mobile devices with M6.0, N7.x and O8.x except exynos9610/9820 in all Platforms, M6.0 except MSM8909 SC77xx/9830 exynos3470/5420, N7.0 except MSM8939, N7.1 except MSM8996 SDM6xx/M6737T software. There is an integer underflow with a resultant buffer overflow in...
CVE-2018-20993
An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization...
CVE-2018-20907
cPanel before 71.9980.37 does not enforce the Mime::listhotlinks API feature restriction SEC-432...
CVE-2018-11010
A Buffer Overflow issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53...
CVE-2018-10947
An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset only after a Debut is rebooted...
CVE-2018-20614
public\install\install.php in CIM 0.9.3 allows remote attackers to reload the product via the public/install//step3 URI...
CVE-2018-20607
imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI...
CVE-2018-20444
Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests...
CVE-2018-15601
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism...
CVE-2018-19757
There is a NULL pointer dereference at function sixelhelpersetadditionalmessage status.c in libsixel 1.8.2 that will cause a denial of service...
CVE-2018-5082
In K7 AntiVirus 15.1.0306, the driver file K7FWHlpr.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002128...
CVE-2018-11011
ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java...